Environmentally robust audio-visual speaker identification. - Lea Schonherr; Dennis Orth; Martin Heckmann; Dorothea Kolossa (SLT, 2016)

Spoofing detection via simultaneous verification of audio-visual synchronicity and transcription. - Lea Schonherr; Steffen Zeiler; Dorothea Kolossa (ASRU, 2017)

Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding. - Lea Schönherr; Katharina Kohls; Steffen Zeiler; Thorsten Holz; Dorothea Kolossa (NDSS, 2019)

Robust Over-the-Air Adversarial Examples Against Automatic Speech Recognition Systems. - Lea Schönherr; Steffen Zeiler; Thorsten Holz; Dorothea Kolossa (CoRR, 2019)

Imperio: Robust Over-the-Air Adversarial Examples for Automatic Speech Recognition Systems. - Lea Schönherr; Thorsten Eisenhofer; Steffen Zeiler; Thorsten Holz; Dorothea Kolossa (ACSAC, 2020)

Leveraging Frequency Analysis for Deep Fake Image Recognition. - Joel Frank; Thorsten Eisenhofer; Lea Schönherr; Asja Fischer; Dorothea Kolossa; Thorsten Holz (ICML, 2020)

Loss Functions for Deep Monaural Speech Enhancement. - Jan Freiwald; Lea Schönherr; Christopher Schymura; Steffen Zeiler; Dorothea Kolossa (IJCNN, 2020)

Detecting Adversarial Examples for Speech Recognition via Uncertainty Quantification. - Sina Däubener; Lea Schönherr; Asja Fischer; Dorothea Kolossa (INTERSPEECH, 2020)

Unacceptable, where is my privacy? Exploring Accidental Triggers of Smart Speakers. - Lea Schönherr; Maximilian Golla; Thorsten Eisenhofer; Jan Wiele; Dorothea Kolossa; Thorsten Holz (CoRR, 2020)

VENOMAVE: Clean-Label Poisoning Against Speech Recognition. - Hojjat Aghakhani; Thorsten Eisenhofer; Lea Schönherr; Dorothea Kolossa; Thorsten Holz; Christopher Kruegel; Giovanni Vigna (CoRR, 2020)

Privacy-Preserving Feature Extraction for Cloud-Based Wake Word Verification. - Timm Koppelmann; Alexandru Nelus; Lea Schönherr; Dorothea Kolossa; Rainer Martin 001 (Interspeech, 2021)

WaveFake: A Data Set to Facilitate Audio Deepfake Detection. - Joel Frank; Lea Schönherr (NeurIPS Datasets and Benchmarks, 2021)

Dompteur: Taming Audio Adversarial Examples. - Thorsten Eisenhofer; Lea Schönherr; Joel Frank; Lars Speckemeier; Dorothea Kolossa; Thorsten Holz (USENIX Security Symposium, 2021)

Adversarially robust speech and speaker recognition. - Lea Schönherr (2021)

Clustering-based Wake Word Detection in Privacy-aware Acoustic Sensor Networks. - Timm Koppelmann; Luca Becker; Alexandru Nelus; Rene Glitza; Lea Schönherr; Rainer Martin 001 (INTERSPEECH, 2022)

Exploring accidental triggers of smart speakers. - Lea Schönherr; Maximilian Golla; Thorsten Eisenhofer; Jan Wiele; Dorothea Kolossa; Thorsten Holz (Comput. Speech Lang., 2022)

On the Limitations of Model Stealing with Uncertainty Quantification Models. - David Pape; Sina Däubener; Thorsten Eisenhofer; Antonio Emanuele Cinà; Lea Schönherr (ESANN, 2023)

Drone Security and the Mysterious Case of DJI's DroneID. - Nico Schiller; Merlin Chlosta; Moritz Schloegel; Nils Bars; Thorsten Eisenhofer; Tobias Scharnowski; Felix Domke; Lea Schönherr; Thorsten Holz (NDSS, 2023)

Venomave: Targeted Poisoning Against Speech Recognition. - Hojjat Aghakhani; Lea Schönherr; Thorsten Eisenhofer; Dorothea Kolossa; Thorsten Holz; Christopher Kruegel; Giovanni Vigna (SaTML, 2023)

Systematically Finding Security Vulnerabilities in Black-Box Code Generation Models. - Hossein Hajipour; Thorsten Holz; Lea Schönherr; Mario Fritz (CoRR, 2023)

LLM-Deliberation: Evaluating LLMs with Interactive Multi-Agent Negotiation Games. - Sahar Abdelnabi; Amr Gomaa; Sarath Sivaprasad; Lea Schönherr; Mario Fritz (CoRR, 2023)

Cooperation, Competition, and Maliciousness: LLM-Stakeholders Interactive Negotiation. - Sahar Abdelnabi; Amr Gomaa; Sarath Sivaprasad; Lea Schönherr; Mario Fritz (NeurIPS, 2024)

Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition. - Edoardo Debenedetti; Javier Rando; Daniel Paleka; Silaghi Fineas Florin; Dragos Albastroiu; Niv Cohen; Yuval Lemberg; Reshmi Ghosh; Rui Wen 002; Ahmed Salem 001; Giovanni Cherubin; Santiago Zanella-Béguelin; et al. (NeurIPS, 2024)

CodeLMSec Benchmark: Systematically Evaluating and Finding Security Vulnerabilities in Black-Box Code Language Models. - Hossein Hajipour; Keno Hassler; Thorsten Holz; Lea Schönherr; Mario Fritz (SaTML, 2024)

Conning the Crypto Conman: End-to-End Analysis of Cryptocurrency-based Technical Support Scams. - Bhupendra Acharya; Muhammad Saad 001; Antonio Emanuele Cinà; Lea Schönherr; Hoang Dai Nguyen; Adam Oest; Phani Vadrevu; Thorsten Holz (SP, 2024)

A Representative Study on Human Detection of Artificially Generated Media Across Countries. - Joel Frank; Franziska Herbert; Jonas Ricker; Lea Schönherr; Thorsten Eisenhofer; Asja Fischer; Markus Dürmuth; Thorsten Holz (SP, 2024)

The Imitation Game: Exploring Brand Impersonation Attacks on Social Media Platforms. - Bhupendra Acharya; Dario Lazzaro; Efrén López-Morales; Adam Oest; Muhammad Saad 001; Antonio Emanuele Cinà; Lea Schönherr; Thorsten Holz (USENIX Security Symposium, 2024)

σ-zero: Gradient-based Optimization of 𝓁0-norm Adversarial Examples. - Antonio Emanuele Cinà; Francesco Villani; Maura Pintor; Lea Schönherr; Battista Biggio; Marcello Pelillo (CoRR, 2024)

Whispers in the Machine: Confidentiality in LLM-integrated Systems. - Jonathan Evertz; Merlin Chlosta; Lea Schönherr; Thorsten Eisenhofer (CoRR, 2024)

Rag and Roll: An End-to-End Evaluation of Indirect Prompt Manipulations in LLM-based Application Frameworks. - Gianluca De Stefano; Lea Schönherr; Giancarlo Pellegrino (CoRR, 2024)

HexaCoder: Secure Code Generation via Oracle-Guided Synthetic Training Data. - Hossein Hajipour; Lea Schönherr; Thorsten Holz; Mario Fritz (CoRR, 2024)

Prompt Obfuscation for Large Language Models. - David Pape; Thorsten Eisenhofer; Lea Schönherr (CoRR, 2024)

Fake It Until You Break It: On the Adversarial Robustness of AI-generated Image Detectors. - Sina Mavali; Jonas Ricker; David Pape; Yash Sharma; Asja Fischer; Lea Schönherr (CoRR, 2024)

Exploring the Potential of LLMs for Code Deobfuscation. - David Beste; Grégoire Menguy; Hossein Hajipour; Mario Fritz; Antonio Emanuele Cinà; Sébastien Bardin; Thorsten Holz; Thorsten Eisenhofer; Lea Schönherr (DIMVA (1), 2025)

σ-zero: Gradient-based Optimization of ℓ0-norm Adversarial Examples. - Antonio Emanuele Cinà; Francesco Villani; Maura Pintor; Lea Schönherr; Battista Biggio; Marcello Pelillo (ICLR, 2025)

Rethinking Robustness in Machine Learning: A Posterior Agreement Approach. - João B. S. Carvalho; Alessandro Torcinovich; Victor Jimenez Rodriguez; Antonio Emanuele Cinà; Carlos Cotrini; Lea Schönherr; Joachim M. Buhmann (CoRR, 2025)

Security Benefits and Side Effects of Labeling AI-Generated Images. - Sandra Höltervennhoff; Jonas Ricker; Maike M. Raphael; Charlotte Schwedes; Rebecca Weil; Asja Fischer; Thorsten Holz; Lea Schönherr; Sascha Fahl (CoRR, 2025)

Buffer-free Class-Incremental Learning with Out-of-Distribution Detection. - Srishti Gupta; Daniele Angioni; Maura Pintor; Ambra Demontis; Lea Schönherr; Battista Biggio; Fabio Roli (CoRR, 2025)